METHOD OF MANAGING TIME-SLOT INTERCHANGE IN 
TRANSOCEANIC MS-SPRING NETWORKS 



INCORPORATION BY REFERENCE OF PRIORITY DOCUMENT 

This application is based on, and claims the benefit of, Italian Patent 
Application No. MI2000A001918 filed on August 29, 2000, which is incorporated by 
reference herein. 

BACKGROUND OF THE INVENTION 

1. Field Of The Invention 

The present invention relates to a method of managing changes of time-slot 
allocations in ring networks protected by a transoceanic MS-SPRING protection 
mechanism. 

2. Description Of The Prior Art 

In SDH MS-SPRING (Multiplex Section Shared Protection Ring) networks, a 
shared protection mechanism is implemented, which mechanism allows for the 
automatic restoration of the traffic in case of defects or failures in the connection 
fibers. In other words, the MS shared protection ring networks perform the automatic 
restoration of the traffic through a synchronized re-routing of said traffic, 
performable at each node of the ring. This operation is controlled by a protocol 
consisting of messages that are continuously interchanged between adjacent nodes. 
Said protocol and the related operations are defined by several international standards 
issued by ANSI, ITU-T and ETSI and they are characterized by a set of rules and 
messages. See, for instance, Recommendation ITU-T G. 841. 
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Protection in an MS shared protection ring network is implemented according 
to a 1 so-called Bridge and Switch technique that consists essentially in re-routing the 
traffic, by means of an appropriate modification in the internal connections of the 
network elements, switching it from the working capacity to the protection capacity. 
The protection in an MS shared protection ring network is a multiplex section- 
oriented protection mechanism, i.e. the events defining the traffic restoration and the 
hierarchy that regulates those events are given at multiplex section level. In the 
"classic" (or terrestrial) MS shared protection rings, in the event of a failure, the 
whole high-priority line capacity is re-routed by utilizing the corresponding low- 
priority line capacity; in the transoceanic MS shared protection rings, on the contrary, 
only the paths affected by a failure are selectively re-routed. 

It is also known that the ring networks provide for a mechanisms termed 
"Time Slot Interchange", in short TSL TSI means, for instance, that when traffic is 
configured in a given ring network, such a traffic, which is carried in the associated 
STM-n and hence in the AU-4 contained in the STM-n, is allowed to travel through a 
network element occupying different AU-4 numbers at the input and at the output. 
Consider for instance a maximum capacity of a four-fiber ring, composed of sixteen 
AU-4s. The TSI mechanism allows one to enter a network element (of pure transit 
and where no termination occurs) with AU-4#X from its West side (W) and to go out 
from its East side (E) with an AU-4#Y, where X^Y =1,2, 16. The advantage is a 
greater flexibility in the traffic allocation and a very efficient exploitation of the 
band. 

At present, performing TSI in ring networks protected by an MS-SPRING 
protection mechanism is not known. In particular, it is not known to perform 
allocation changes in transoceanic MS shared protection ring networks. 

SUMMARY OF THE INVENTION 
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v Therefore, the main object of the present invention is to provide a method 
allowing the execution of allocation changes in transoceanic rings protected by an 
MS -SPRING mechanism. This and further objects are achieved by a method having 
the features set forth in independent claim 1 and a network element according to 
claim 8. The respective dependent claims define further advantageous characteristics 
of the invention itself. All the claims are intended to be an integral part of the present 
description. 

The basic idea of the present invention consists substantially in protecting the 
high-priority traffic by assigning, in case of a ring failure, the low-priority channel 
time slots chosen according to the real failure location and to the instant at which 
such failure has occurred, with respect to other failures possibly already present. 

The invention will certainly become clear in view of the following detailed 
description, given by way of a mere non limiting and exemplifying example. 

BRIEF DESCRIPTION OF THE DRAWINGS 

In the drawings: 

Fig. 1 shows a ring network in a stable faultless situation, the network having 

a plurality of nodes, two installed paths and some allocation changes; 

Fig. 2 shows the same ring network of Fig. 1 just after a ring failure took 

place; 

Fig. 3 shows the ring network of Fig. 2 in a stable situation with a ring failure; 
Figs. 4 show the signaling that is received/generated by the single nodes and 
the corresponding actions performed in the event of simultaneous double 
failure; 
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Figs. 5 show the signaling that is received/generated by the single nodes and 
1 the corresponding actions performed in the event of nearly simultaneous 
double failure; 

Figs. 6 show the signaling that is received/generated by the single nodes and 
the corresponding actions performed in the event of double failure at different 
times (first sub-scenario); 

Figs. 7 show the signaling that is received/generated by the single nodes and 
the corresponding actions performed in the event of double failure at different 
times (second sub-scenario); 

Figs. 8 show the signaling that is received/generated by the single nodes and 
the corresponding actions performed in the event of clearing of a first failure; 
and 

Figs. 9 show the signaling that is received/generated by the single nodes and 
the corresponding actions performed in the event of clearing of a second 
failure. 

BEST MODE FOR CARRYING OUT THE INVENTION 

In the various figures, a four-fiber transoceanic telecommunication ring has 
been always depicted. The two working fibers (otherwise known as "high-priority 
channels" or "HP channels") are indicated by solid-line arrows whereas the 
protection fibers (otherwise known as "low-priority channels" or "LP channels") are 
indicated by dashed-line arrows. Naturally, the present invention applies both to the 
illustrated case of bi-directional traffic and to the case of unidirectional traffic. 

Moreover, the present invention is applicable also to rings in which the traffic 
subjected to TSI is configured with "channel concatenation (AU4)". 
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The ring illustrated to describe the invention comprises ten network elements 
or rfodes, represented by blocks and designated by respective numerals (1 to 10). The 
West (W) and East (E) sides of each node are indicated. The term "span" is used 
throughout this description to mean that part between two adjacent nodes, for 
instance between nodes 1 and 2 or the one between nodes 7 and 8. 

In the ring there are depicted, by way of a non-limiting example, two paths 
installed, "path (a)" and "path (b)". The first path (path a) is depicted by a bolt solid 
line whereas the second path (path b) is depicted by a bolt dotted line. Path (a) is 
inserted at node 2 and is dropped at node 8. Path (b) is inserted at node 4 and is 
dropped at node 9. 

Finally, it has been tried to clearly indicate (with numbers after symbol "#") 
the various time slots in which the various paths are allocated, span by span. Thus it 
has been also indicated if a Time Slot Interchange (TSI) occurs at a node or if that 
node allows that path to transit without changing the AU-4 on which it is allocated. 

The present invention contemplates the general criteria set forth below: 

I) single failure : once a ring failure has occurred in a given span, a ring switch 
action is performed by the MS shared protection mechanism. This activity defines the 
set of re-routable paths, namely all the paths whose nominal route includes the 
failured span. According to the present invention, each of these paths is re-routed on 
the time slot of the low-priority (LP) channels corresponding to the time slot of the 
high-priority (HP) channels of the failured span. There is no risk of any conflict since 
the LP time-slot assignment criterion is the same for all the failured paths. 

II) double failure : if a failure occurs at a further span and the path can still be 
saved, then 

II.I) i) the actual re-routing is released; ii) among the two failured spans one 
is chosen according to a certain criterion; and iii) the path is re-routed over the time 
slot of the low-priority (LP) channels corresponding to the time slot of the high- 

5 



priority (HP) channels of the selected failured span. Should multiple (more than two) 
failures occur, the choice of the span to consider for the TSI path protection is to be 
made by selecting, according to the above criterion, among the spans adjacent to the 
switching nodes that are able to communicate with the termination nodes of the path 
to be protected. There is no risk of any conflict since the LP time-slot assignment 
criterion is the same for all the paths affected by the failure. In this way, any transient 
misconnection is avoided. 

II.II) The actual re-routing is not released when the persistency of the re-routing 
information is supported by the ring network elements. 

The procedures that are implemented by each node of the ring (in addition to 
the procedures already provided for by the MS shared protection mechanism) will be 
indicated below: 

A. If, at both W and E sides of the node, two Bridge Requests with an 
"Idle" status code concerning the same span (single failure) are detected, then each 
path comprising the span in question is re-routed over the LP time slot equal to the 
HP time slot of the (sole) span affected by the failure. In other words, if the node is a 
path termination node (a node where the path to be re-routed is inserted or dropped), 
the Bridge & Switch action is performed by utilizing the LP time slot equal to the HP 
time slot of the span affected by the failure. 

Al . If at W or E side of the node at least one Bridge Request with an 
"Idle" status code is detected, a pass-through is performed, if necessary, by utilizing 
the same LP time slot (LP time slot equal to the HP time slot of the span affected by 
the failure). 

B. If at both W and E sides of the node Ridge Requests with a "Bridged 
and Switched" status code concerning different spans (multiple failures) are detected, 
then each path comprising the spans in question is re-routed over the LP time slot 
equal to the HP time slot of the span affected by the failure that has been chosen 
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according to a fixed criterion. The criterion for selecting one among the failed spans 
could, for instance, be any one of the following: 

a) the failed span adjacent to the switching node with higher (or lower) node 
identification is chosen; 

b) the failed span adjacent to the switching node coming first (or last) in the 
ring map; or 

c) the failed span adjacent to the switching node that is "far West" or "far 
East" node in the ring. 

Similarly to the above case A, if the node in question is a path termination 
node (node in which the path to be re-routed is inserted or dropped), the Bridge & 
Switch action is performed by utilizing the LP time slot equal to the HP time slot of 
the selected failured span. 

B 1 . If at the W or E side of the node at least one Bridge Request with 
"Bridged and Switched" status code is detected, a pass-through is performed, if 
necessary, by utilizing the same LP time slot as above. 

C. In an optimized embodiment, should a path re-routing due to single 
failure be under way, if at W and E sides of the node Bridge Requests with a different 
("Idle" or "Bridged and Switched") status code that carry the indication of a second 
failure, hence located at a different span, are detected, then, for each path that has 
already been re-routed, it is evaluated if the new requests exhibit a failured state that 
requires to release or maintain the present re-routing. It is not necessary to release the 
actual re-routing of a single path in the following cases: 

i) when a failure is detected in addition to the already existing failure/s (and 
such new failure/s does/do not result in the "isolation" condition of any of the 
termination nodes of the already protected path); or ii) when the last occurred span 
failure has been removed. 
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It is understood how the persistency of the path re-routing condition is strictly 
connected to the coexistence of the aforesaid triggers at both sides of the nodes. This 
behavior results in the correct re-routing of the failured paths, namely it prevents 
misconnections from being created during transient states of the ring protection 
mechanism. 

Note that the above is applicable to the case of bi-directional path and 
unidirectional one not using the inverse route. Clearly, if two unidirectional paths are 
allocated on the same time slot (in opposite directions), then the same LP time slot 
can be assigned to both paths. 

Fig. 1 shows a transoceanic MS shared protection ring protected against 
failures in accordance with the invention, at some nodes of the ring Time-Slot 
Interchange (TSI) occurring. The installed paths are two: (a) and (b). Path (a) enters 
the ring at node 2 and is allocated on the AU-4 #1; therefore, in span 2-3 the 
allocation is AU-4#1; at node 3 the allocation is unchanged (therefore it remains AU- 
4#1); at node 4, the allocation is changed from AU-4#1 to AU-4#3; in span 4-5 the 
allocation is therefore AU-4#3; at node 5 the allocation is not changed (therefore it 
remains AU-4#3); in span 5-6 the allocation is therefore AU-4#3; at node 6 the 
allocation is changed from AU-4#3 to AU-4#7; therefore, in span 6-7 the allocation 
is AU-4#7; at node 7 the allocation changes again from AU-4#7 to AU-4#6; 
therefore, in span 7-8 the allocation is AU-4#6; finally, path (a) is dropped at node 8. 
For path (b): it enters at node 4 and is allocated on AU-4#1; this allocation is 
maintained up to node 6 where it changes from AU-4#1 to AU-4#6; it is changed 
again at node 7 (passing from AU-4#6 to AU-4#7) and at node 8 (passing from AU- 
4#7 to AU-4#6). Finally, path (b) is dropped at node 9. 

In the event of a ring failure (namely, a failure that makes both high-priority 
(HP) channels and low-priority (LP) channels useless), the present invention provides 
for a method of remedying such failure notwithstanding the presence of allocation 
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changes in the ring. Reference should be made, for the event of single ring failure, to 
Fig's 2 and 3 where a ring failure in the span 6-7 has been simulated. 

As it is known, the management of failures in the synchronous (SDH or 
SONET) telecommunications networks occurs, for some protection types among 
which the MS-SPRING one, through bytes Kl and K2 of the frame overhead. Since 
the present invention does not concern specifically such bytes Kl and K2, a more 
precise description thereof will not be given, the reader having the possibility to refer 
to relevant Recommendations, for instance the ITU-T Recommendation G. 841, 
incorporated herein by reference. 

In the event of a failure, the nodes (6 and 7) that are adjacent to the failure 
will send, as usual, proper failure signaling in the direction opposite to the failure. 
The structure of the request (APS signaling) is the following: Bridge Request, 
Destination Node ID, Source Node ID, Type of Path, Protection Status. In this 
instance, the node 6 will send a signaling of the type SF,7,6,L,ID (Signal Fail, 
Destination Node: 7, Source Node: 6, Path: Long, Protection Status: Idle) to indicate 
that a ring failure occurred at span 6-7 and that no action has been taken for the time 
being. Node 7 will do the same by sending a signaling type SF,6,7,L,ID from its East 
side (E). 

Such signaling will travel down the ring in opposite directions and will be 
received by termination nodes (2, 8; 4, 9) of paths (a) and (b) that will perform the 
requested Bridge and Switch (BR & SW) by utilizing the LP channels. In accordance 
with the present invention, the ring protection (BR&SW and pass-through), in the 
event of single ring failure, is performed by squelching the terminations of LP traffic 
allocated on the AU-4s corresponding to the failured span and by allocating the HP 
traffic on such AU-4s. With reference to Fig. 3, since in span 6-7 the path (a) was 
allocated on the HP AU-4#7 and the path (b) was allocated on the HP AU-4#6, the 
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allocation AU-4#7 (of the LP channels) will be utilized for the first path and the 
allocation AU-4#6 (of the LP channels) will be utilized for the second path. 

Should TSI be configured also on low-priority traffic, the high-priority traffic 
protection that requires the use of one of the LP channels utilized in the low-priority 
TSI, will anyway result in the squelching action on both the low-priority traffic 
terminations. 

Once a node adjacent to the failure has received the signaling sent by its 
homologous opposite side, with Protection Status corresponding to "Idle", the node 
itself will send a modified signaling (with Protection Status = Bridged & Switched, 
BS). In other words, node 6 will send SF,7,6,L,BS from its West side whereas node 7 
will send SF,6,7,L,BS from its East side. Upon restoration of the full ring 
functionality (fault clearing) the BR&SW will be removed and the failure signaling 
(SF,7,6,L,BS and SF,6,7,L,BS) will be removed. 

The present invention, in addition to the single failure event illustrated above, 
provides for a traffic protection method applicable to multiple failures leading to 
isolation of one or more nodes in which the TSI of the installed path/s is configured. 
Within this context three failure scenarios are considered and separately described: in 
the first scenario the failures occur simultaneously, in the second scenario the failures 
occur nearly simultaneously while in the third scenario the failures occur at different 
times. 

Referring initially to Figs. 4, consider the case where two failures (SF1 and 
SF2) occur exactly at the same time instant. For simplicity, paths (a) and (b) before 
the occurrence of the failures, are allocated in a manner similar to what described for 
Fig. 1 and therefore the description of the allocations will not be repeated here. Upon 
the occurrence of the first failure (SF1) on the span 6-7, the node 6 (Fig. 4.1) will 
send a failure signaling (SF,7,6,L,ID) from the West side whereas, upon the second 
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failure (SF2) on the span 7-8, node 8 will send a simultaneous failure signaling 
(SF,7,8,L,ID) from the East side (Fig. 4.2). 

At the time when each of the two signaling with "Idle" code, which were 
generated by the switching nodes, is received by the termination nodes of the paths to 
be protected, squelching of the local termination (if any) of the LP channel 
corresponding to the HP channel allocated in the failed span to which the signaling is 
referred, takes place; while, at the nodes designed to realize the pass-through of the 
LP channels, the squelching of the local termination (if any) of the LP channel 
corresponding to the HP channel allocated in the failed span to which the signaling is 
referred takes place and the subsequent pass-through connection also takes place. The 
actions just described (squelching and squelching + pass-through) are removed both 
from the path termination nodes and from the pass-through nodes, as soon as such 
nodes receive the second signaling generated by the switching nodes. 

When (Fig. 4.3) the signaling (SF,7,6,L,ID) containing the "Idle" code of SF1 
reaches node 8, node 8 (Fig. 4.4) will send a signaling containing BR&SW (BS) 
Status Code of the type SF,7,8,L,BS. The same will be for node 6 (Fig. 4.5): as soon 
as it receives signaling (SF,7,8,L,ID) containing the "Idle" code of SF2, it will send a 
signaling containing BR&SW Status Code (BS) of the type SF,7,6,L,BS. 

At the time when one of the two signalings with BS code generated by 
switching nodes is received by the termination nodes of the HP paths to be protected, 
the squelching of the local termination (if any) of the LP channel to be used for the 
protection, that was chosen according to one of the criteria described above, takes 
place; while, at the nodes designed to realize the pass-through of the LP channels, the 
squelching of the local termination (if any) of the same LP channel will take place 
and also the subsequent pass-through connection, will take place. 

The Bridge & Switch action that is performed on the LP channel chosen 
according to the same criterion as above, is performed by every termination node of 
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the HP paths to be protected, as soon as both signalings with BS Code (SF,7,6,L,BS 
and SF,7,8,L,BS) are detected at the two sides of the node itself. 

Thus, a stable state of the protected ring has been achieved. 

Referring initially to Figs. 5, consider the case where two failures (SF1 and 
SF2) occur nearly at the same time instant (or anyway failure SF2 occurs before the 
situation following SF1 is stabilized). For simplicity, paths (a) and (b) before the 
occurrence of the failures, are allocated similarly to what described for Fig. 1 and 
therefore the description of the allocations will not be repeated here. Upon the 
occurrence of the first failure (SF1) in span 6-7, the node 6 will send a failure 
signaling (SF,7,6,L,ID) from the West side and, similarly, it will send another failure 
signaling (SF,6,7,L,ID) from East side. See Figs. 5.1 and 5.2. 

Suppose (Fig. 5.3) that the failure signaling (SF,6,7,L,ID) from the East side 
is able to reach node 8 before the second failure (SF2) occurs in span 7-8, which 
results in node 7 isolated. Upon the second failure (SF2), node 8 (node adjacent to the 
failure) will send a corresponding failure signaling (SF,7,8,L,ID) from its East side. 
Anyway, the signaling of the second failure will follow the first failure one (Fig. 5.4). 

As soon as the signaling (SF,6,7,L,ID; SF,7,6,L,ID) containing the "Idle" 
code of the first failure reach the termination node 2 (Fig. 5.5) of path (a), this node 
will perform the BR&SW action by utilizing the LP AU-4 corresponding to the span 
affected by the first failure (LP AU-4#7, in this instance). However, as soon as also 
the new signaling (SF,7,8,L,ID) of the second failure (SF2) reaches node 2, the 
BR&SW action, just realized, is removed (Fig. 5.6). 

Analogously (Fig. 5.7), as soon as the signaling (SF,6,7,L,ID; SF,7,6,L,ID) 
containing the "Idle" code of the first failure reach the termination node 4 of the path 
(b), this node will perform the BR&SW action by utilizing the LP AU-4 
corresponding to the span affected by the first failure (LP AU-4#6 in this case). 



12 



However, as soon as also the new signaling (SF,7,8,L,ID) relating to the second 
failure (SF2) reaches node 4, the BR&SW action, just realized, is removed (Fig. 5.8). 

Obviously, the actions to be taken before the just described temporary 
BR&SWs are the squelching of the local termination (if any) of the LP channel 
associated with the span 6-7 both on the termination nodes of the paths to be 
protected, and on the nodes designed to realize the pass-through, as well as the pass- 
through connection of the LP channel itself: in order a node to perform such actions, 
the reception of at least one of the two signaling with "Idle" code generated by the 
switching nodes is enough to the interested node. 

At the same time, when the signaling (SF,7,6,L,ID) containing the "Idle" code 
of the first failure reaches node 8, node 8 will send a signaling containing the 
BR&SW (BS) status code of the type SF,7,8,L,BS (Fig. 5.9). The same will be for 
node 6: as soon as it receives the signaling (SF,6,7,L,ID) containing the "Idle" code 
of the first failure, it will send a signaling containing the BR&SW (BS) Status Code 
of the type SF,7,6,L,BS (Fig. 5.10). 

Because of the presence of the new signaling (SF,7,8,L,ID) concerning the 
second failure (SF2), node 6 will change again its signaling from SF,7,6,L,BS to 
SF,7,6,L,ID (Fig. 5.11). 

At this stage both the signaling transmitted by node 8 containing the BR&SW 
Status Code and the two consecutive signaling transmitted by node 6 respectively 
containing the BS&SW (BS) and the "Idle" status codes are present in the ring. The 
signaling containing the BS Status Code result, at the nodes detecting them, in the 
squelching of the local termination (if any) of the LP channel chosen for the 
protection according to one of the aforesaid criteria (for instance the LP channel 
corresponding to the allocation used in the span affected by the first failure, AU-4#6), 
as well as in the pass-through of such LP channel at the nodes designed to perform 
such a function. It is to be noted that, among the two signaling that consecutively 

13 



emitted by node 6, the one containing "Idle" code does not remove the squelching 
and pass-through actions activated by the previous signaling (with BS code), since 
both refer to the same failed span: SF,7,6,L,BS and SF,7,6,L,ID. 

The node 9 (Fig. 5.12), receiving a signaling with BS code (SF,7,6,L,BS and 
SF,7,8,L,BS) from both its W and E sides, will perform the BR&SW action by 
utilizing the LP allocation related to one of the failured spans, for instance the one 
affected by the first failure (AU-4#6). Node 8, that receives the signaling containing 
the BS code (SF,7,6,L,BS) previously sent to it by node 6, will realize the BR&SW 
action (Fig. 5.13) by utilizing the LP allocation related to one of the failured spans, 
for instance the one affected by the first failure (AU-4#7). Some of the possible 
selection criteria have been mentioned above. 

Since the request that reaches both node 9 and node 8 with "Idle" code, is 
related to the failured span already indicated in the preceding request (SF,7,6,L,BS), 
the BR&SW action is maintained (Fig. 5.14). 

When the request related to the second failure (SF2) and containing the BS 
code reaches node 6, the APS signaling is updated with the BS code, namely node 6 
will send, from side W, the signaling SF,7,6,L,BS (Fig. 5.15). 

Node 4, as soon as it receives signaling with BS code from both sides, will 
realize the BR&SW action by utilizing the LP allocation related to one of the spans 
affected by a failure, for instance the one affected by the first failure (AU-4#6). 

Lastly, the node 2, as soon as it receives, from both its W and E sides, a 
signaling with BS code (SF,7,6,L,BS and SF,7,8,L,BS), will perform the BR&SW 
action (Fig. 5.16) by utilizing the LP allocation related to one of the spans affected by 
a failure, for instance the one affected by the first failure (AU-4#7). 

Thus, a stable state in the protected ring is obtained. 

As said above, the scenario of the actions taken by the various nodes is 
different in the case where the failures do not occur at the same time. In this 
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connection, two different sub-scenarios should be distinguished. With reference to 
Figs 1 to 3 and 6, the actions and the consequences related to the first sub-scenario 
are schematically listed below starting from a situation free of faults. 

The first failure (SF1) occurs. The node 6 sends SF,7,6,L,ID from the W side. 
The node 7 sends SF,6,7,L,ID from the side E (Fig. 2). 

SF,7,6,L,ID and SF,6,7,L,ID reach the termination nodes of paths (a) and (b). 
The termination nodes perform the BR&SW action for each path to be protected by 
utilizing the corresponding LP channels of the span affected by SF1. Path (a) is 
allocated on LP AU-4#7. Path (b) is allocated on LP AU-4#6 (Fig. 3). 

The nodes 6 and 7 adjacent to the failure SF1 send respective signaling with 
BS code (SF,7,6,L,BS and SF,6,7,L,BS) and a stable scenario of ring protected 
against SF1 is obtained (Fig. 3). 

SF2 occurs on span 7-8: node 7 is isolated (Fig. 6.1). Node 8 sends 
SF,7,8,L,ID from the side E (Fig.6.2). 

The BR&SW action (both the BR&SW and the pass-through at the 
intermediate nodes) performed for path (a) is removed (Figs. 6.3 and 6.4). The 
BR&SW action (both the BS&SW and the pass-through at the intermediate nodes) 
performed for path (b) is removed (Figs. 6.5 and 6.6). 

Node 6 receives the signaling SF,7,8,L,ID and sends SF,7,6,L,ID (Fig. 6.7). 

The node 8 receives from node 6 the signaling SF,7,6,L,ID and sends 
SF,7,8,L,BS (Fig. 6.8). 

Node 6 receives the signaling SF,7,8,L,BS and sends SF,7,6,L,BS (Fig. 6.9). 

Nodes 2 and 8 receive the signaling SF,7,8,L,BS and SF7,6,L,BS and perform 
the BR&SW action by utilizing for instance the LP channels with AU-4 
corresponding to that of the first failed span (LP AU-4#7). The scenario becomes 
stable for the path (a) (Figs. 6.10 and 6.1 1). 
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Nodes 4 and 9 receive the signaling SF,7,8,L,BS and SF,7,6,L,BS and 
perform the BR&SW action by utilizing for instance the LP channels with AU-4 
corresponding to the one of the first failed span (LP AU-4#6). The scenario becomes 
stable for path (b) (Figs. 6.12, 6.13). 

The squelching actions of the local termination (if any) of the LP channel 
chosen for the protection according to one of the criteria already described and the 
subsequent pass-through of the same LP channel at the intermediate nodes come 
before the BR&SW actions just described and are performed with the rules already 
pointed out for the two previous scenarios. 

With reference to Figs. 1 to 3 and 7, the actions and the consequences related 
to the second sub-scenario of double failure at different times will now be 
schematically listed in the following, still starting from a faultless situation. 

The first failure (SF1) occurs. Node 6 sends SF,7,6,L,ID from the W side. 
Node 7 sends SF,6,7,L,ID from the E side (Fig. 1). 

SF,7,6,L,ID and SF,6,7,L,ID reach the termination nodes of the paths (a) and 
(b). The termination nodes perform the BR&SW action for each path to be protected 
by utilizing the corresponding LP channels of the span affected by SF1. The path (a) 
is allocated on LP AU-4#7. The path (b) is allocated on LP AU-4#6 (Fig. 2). 

The nodes 6 and 7 adjacent to failure SF1 receive the signaling with ID code 
(SF,7,6,L,ID and SF,6,7,L,ID), send respective signaling with BS code (SF,7,6,L,BS 
and SF,6,7,L,BS) and a stable scenario of ring protected against SF1 is obtained (Fig. 
3). 

SF2 occurs in span 7-8: node 7 is isolated (Fig. 7.1). Node 8 sends 
SF,7,8,L,ID from the E side (Fig. 7.2). 

The node 8, as a node adjacent to the failure and as a termination node, 
evaluates whether the already protected paths can still be protected. In the 
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affirmative, no action is taken; in the negative, the BR&SW action is removed (Fig. 
7.3). 

Node 9 receives the SF,7,8,L,ID request and evaluates whether the already 
protected paths can still be protected. In the affirmative, no action is taken; in the 
negative, the BR&SW action is removed (Fig. 7.4). 

Node 2 receives the SF,7,8,L,ID request and evaluates whether the already- 
protected paths can still be protected. In the affirmative, no action is taken; in the 
negative, the BR&SW action is removed (Fig. 7.5). 

Node 4 receives the SF,7,8,L,ID request and evaluates whether the already 
protected paths can still be protected. If yes, no action is taken; if not, the BR&SW 
action is removed (Fig. 7.6). 

As soon as node 6 receives the SF,7,8,L,ID signaling, it updates its request by 
inserting the "Idle" status code, of the type SF,7,6,L,ID. After a further signaling 
exchange, the nodes adjacent to the failure update the respective signaling by 
inserting "BR&SW" (BS) status code. 

At this point only signaling with BS code are traveling in the ring that is 
failured by SF1 and SF2 and therefore a stable scenario for paths (a) and (b) towards 
the failures SF1 and SF2 has been achieved. 

It will be recognized that the first sub-scenario results in a rather simple 
implementation since it is not necessary to store the failure "history" but, at the same 
time, traffic is not safeguarded in an optimal manner because the BR&SW is always 
removed. On the contrary, the second sub-scenario safeguards the traffic in a better 
manner but it is more difficult to be implemented because the traffic "history" shall 
be stored. 

Having analyzed in detail the single-failure and the double-failure situations 
(simultaneous, nearly simultaneous or at different times), we will go on in describing 
schematically the actions that each network node must perform (and the 
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corresponding consequences) when the failures are cleared and the ring functionality 
is restored. 

Start from a stable situation of two failures SF1, SF2: in this situation, node 7 
is isolated (Fig. 8.1) and only signalings with BS code (SF,7,8,L,BS and 
SF,7,6,L,BS) are traveling in the ring. Consider to clear first SF1: the node 7, no 
longer isolated, begins to send the APS signaling with "Idle" code related to the span 
affected by a failure (SF2) still present between the nodes 8 and 7 (SF,8,7,L,ID) (Fig. 
8.2). 

Since the LP allocation of the span 7-6 had been chosen, the BR&SW (and 
squelching of the any local termination of the LP channel utilized) action at node 4 
must be removed. Similarly, as soon as also the SF,8,7,L,ID signaling reaches the 
other path termination nodes (2, 9, 8), the BR&SW and any local squelching action is 
removed also at such nodes 2, 9, 8 (Figs. 8.3 to 8.5). The removal of "BR&SW" at 
the termination nodes is accompanied by the removal of the pass-through (and of any 
local squelching) from the intermediate nodes that have performed the pass-through 
of the LP channel heretofore utilized for the protection. Since the signalings present 
at the intermediate nodes are related to the same span affected by a failure, such 
nodes can perform, if required, the pass-through of the LP channels, related to the 
current failure, to be utilized for the path protection. 

The node 8, as a node adjacent to the failure SF2, receives SF,8,7,L,ID and 
changes the code of its signaling from SF,7,8,L,BS to SF,7,8,L,ID (Fig. 8.6). Such 
signaling with ID code gradually reaches all the termination nodes (9, 2, 4) showing 
them in this way that a single failure (SF2) is present. The termination nodes in turn 
will execute the BR&SW action (Figs. 8.8 to 8.10) by utilizing the LP channels that 
correspond to the failured span (for path (a) the LP AU-4#6 will be utilized, for path 
(b) the LP AU-4#7 will be utilized). 
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The nodes (7, 8) adjacent to the failure still present (SF2) will send 
corresponding signaling with BS code (SF,8,7,L,BS and SF,7,8,L,BS) and a single- 
failure stable condition will be achieved (Figs. 8.11, 8.12). 

As soon as also SF2 is cleared, the ring will reach the faultless stable 
condition (Figs. 8.13, 8.14), with the progressive removal of the "Bridge" and 
"Switch" actions from all the path termination nodes and the consequent signalings 
with "No Request, Idle" code (NR,9,8,S,ID and NR,6,7,S,ID) by all the ring nodes, 
including nodes (7, 8) adjacent to the just cleared failure (SF2). 

Start now from a stable situation of two failures SF1, SF2 (Fig. 9.1): in this 
situation node 7 is isolated and only signalings with BS code (SF,7,8,L,BS and 
SF,7,6,L,BS) are traveling in the ring. Consider to clear SF2 first: node 7 (Fig 9.2), 
no longer isolated, begins to send the APS signaling with "Idle" code (SF,6,7,L,ID) 
related to the span affected by failure (SF1) still present between nodes 6 and 7. 

Since just the LP allocation of the span 7-6 had been chosen, the BR&SW 
action at node 8 can be maintained (Fig. 9.3). Similarly, the SF,6,7,L,ID signaling 
reaches the other path termination nodes (9, 2, 4) but the BR&SW action is 
maintained also at such nodes 9, 2, 4 (Figs. 9.4 to 9.6). 

The same processing is carried out at intermediate nodes that perform the 
pass-through of the LP channels used for the protection: the pass-through is 
maintained. 

Finally, also node 6 adjacent to the failure SF1 receives SF,6,7,L,ID and will 
send the corresponding signaling with ID code (SF,7,6,L,ID), reaching a stable 
scenario with "BS" signalings all over the ring. 

As soon as also SF1 is cleared, the ring will reach the faultless stable 
condition, with the progressive removal of the "Bridge" and "Switch" actions from 
all the path termination nodes and the consequent signaling with "No Request, Idle" 
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code (NR,5,6,S,ID and NR,8,7,S,ID) issued by all the ring nodes, including nodes (6, 
7) 'adjacent to the just cleared failure (SF2). See Figs. 9.7 and 9.8. 

In view of the above detailed description, relating to some cases of single or 
double failure, the person skilled in the art can easily devise the actions that every 
node must perform in the event of a failure on other spans and/or in the case where 
more than two failures occur. Naturally, the present invention is applicable to all 
these cases and its scope covers all these cases and is limited only by the following 
claims. 

As far as the practical realization is concerned, it will be understood that all 
the actions performed by every node or network element are the known Pass- 
Through, Bridge and Switch, squelching of any terminations of the Low-Priority 
channels involved in the protection and transmission of signaling, substantially of 
known type, actions. Therefore, the implementation of the present method does not 
require to change the physical structure of the existing network elements used in ring 
networks protected against possible failures. Any modifications must be carried out 
at level of consequent actions performed by the nodes affected by the protection 
mechanism, according to signalings already provided for and present in the 
standardized protocol and on the ground of ring map information, already provided 
for and processed, as well as traffic map that carries the allocation time-slot 
information, in every ring span of the single path that is installed. 

Finally it is pointed out that, although the present invention has been 
described in detail with reference to SDH synchronous transmission, it applies, in 
similar manner, to other types of synchronous transmission, typically SONET. The 
fact that this type of signals has not been taken into account in the description shall 
not be interpreted as a limitation but merely as an example and in order to render the 
description clear. Therefore, for the purposes of the present description and of the 
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annexed claims, the terminology used for SDH transmissions will include at least the 
corresponding SONET terminology and shall be read in this perspective. 
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